Real-World ICS Security Tales From the Trenches

This article details real-world incidents involving industrial control systems (ICS) security vulnerabilities, highlighting the challenges of securing OT environments beyond traditional IT security practices. Two separate cases are presented: one involving an Iranian-linked APT attempting to gain persistent access to an ICS network through an unexpected vulnerability, and another where the inappropriate use of standard IT scanning tools caused a shutdown of critical turbines at a power generation plant. Both stories underscore the importance of specialized OT security expertise and the dangers of applying generic IT security solutions to industrial control systems.